Step Apple, Google and Mozilla's footsteps, Microsoft (Microsoft) decided to cancel the CA trust from China's Wo (WoSign) and its subsidiaries StartCom. Certificate from China's authority Vorthong (WoSign) and StartCom (Editor's note: It is reported that, StartCom was the end of 2015 was WoSign secret acquisition) is recognized Microsoft failed to meet the standard trusted root certificates.
Microsoft found Vorthong, StartCom there is an unacceptable security risk, such as the inverted issued SHA1 certificate, the certificate issued by mistake, accident certificate revocation, issuing various certificates have the same serial number, repeatedly violated the CA / Browser Forum Baseline Requirements.
Therefore, Microsoft decided to step by step, and no longer trust Vorthong StartCom certificate valid certificate start date is later than September 26, 2017, which means that the current certificate has been issued will remain valid until the certificate expires. After September 2017, Windows 10 will no longer trust any new certificate from Vorthong and StartCom issued.
Microsoft's official announcement: https: //blogs.technet.microsoft.com/mmpc/2017/08/08/microsoft-to-remove-wosign-and-startcom-certificates-in-windows-10/
